New Live monitor & verification playground are live

Every AI claim, on the record.

Attestia is the compliance audit trail for LLM apps. We wrap every model call, verify each claim against your own sources with a panel of independent judges, and seal the result as tamper-evident, auditor-ready evidence.

See how it works
Private beta. Onboarding regulated teams in cohorts · early access this quarter.
af_x3k…7yv · Encounter Summary Drafter Sealed · Ed25519
Claim 1 of 3 · verified
Metformin is contraindicated in patients with an eGFR below 30 mL/min/1.73m². Hold metformin and reassess renal function at follow-up.
Verified
FDA Prescribing Information — Metformin HCl§5.1, p. 9 · 96.4
Metformin is contraindicated in patients with eGFR below 30 mL/min/1.73m². Initiation in patients with eGFR 30–45 is not recommended.
Modelgpt-4o-mini
Latency1.78s
PII redacted4 entities
Block#1,247
Lynx-8B0.97
Claude 3.50.94
Gemini Pro 1.50.95
Cohen's κ 0.92 · strong calibrated agreement
Evidence mapped to HIPAA SOC 2 GDPR EU AI Act ISO 42001 NIST AI RMF
The problem
When a regulator asks "prove this AI output was correct," a screenshot won't hold up.
01

Logs aren't evidence

A raw prompt-and-response log shows what the model said — not whether it was true, who checked it, or that the record hasn't been edited since.

02

Hallucinations reach production

In regulated workflows a single contradicted claim is a clinical, legal, or financial incident. You need it caught before it ships, not discovered in an audit.

03

Audits are a fire drill

Assembling a defensible trail after the fact takes weeks of screenshotting and spreadsheet archaeology — and still leaves gaps an auditor can drive through.

The platform

One wrap around your model call. Everything else on the record.

Attestia sits between your app and any LLM provider. Every call is verified, scored, and sealed — then made provable to anyone, without them trusting us.

Claim verification

Every factual claim in a response is extracted and checked against your registered sources — with an exact span, quote, and similarity score behind each verdict.

Extract · match · score

Multi-judge panel

Three independent models vote on each claim. We report inter-judge agreement as a calibrated Cohen's κ — so a verdict is a consensus, not one model's opinion.

3 judges · κ agreement

Tamper-evident seal

Each trace is signed Ed25519 and anchored to a daily public bulletin. Change one byte and the chain breaks — visibly, to any auditor, forever.

Signed · chain-anchored
Policy engine

Decide what ships and what gets blocked

Write policies in plain terms — verify with N judges, block on contradiction, route partials to human review, page the right channel. The first blocking match wins, evaluated in order, before the response ever reaches your app.

Verified → allow94%
Partial → review4.7%
Contra → block1.3%
134 blocked · 30d · −12% vs prior

Evidence packs

Generate an auditor-ready bundle for any date range in one click — every verified call, verdict mix, and signature, sealed as a portable, offline-verifiable file.

One click · portable

Live monitor

Watch verifications stream in real time across every wrapped app — per-minute throughput, verdict mix, p95 latency, and sandbox health, all in one glance.

Real-time stream

Auditor portal

Share a read-only link. Your auditor opens it without an account, replays any trace, and verifies signatures offline — no trust in Attestia required.

No login · offline-verifiable
How it works

Four steps from model call to sworn evidence

Change one line at the call site. Attestia does the rest — synchronously, in under two seconds at p95.

STEP 01

Wrap

Point your existing OpenAI, Anthropic, or Google call at Attestia. PII is redacted before it reaches any model.

// one line
const res = await attestia.wrap(call)
STEP 02

Verify

Claims are extracted, matched to your sources, and voted on by three independent judges in parallel.

extract → match
3 judges → verdict
κ 0.92 · 1.78s
STEP 03

Seal

The verified trace is signed Ed25519 and anchored to the day's public bulletin. Immutable from that moment.

signed Ed25519
block #1,247
0xa3b9…f201
STEP 04

Prove

Export an evidence pack or share a portal link. Anyone can verify it offline, without trusting us.

// auditor-ready
attestia.pack(range)
The verdict system

Four verdicts. Color, icon, and word — never color alone.

Every claim resolves to exactly one verdict, applied consistently from the live monitor to the sealed evidence pack an auditor reads two years later.

Verified

Independently corroborated by a registered source. Allowed and sealed.

Partial

Weak or incomplete support. Routed to human review before it ships.

Unverifiable

No registered source matches. Warned and sealed, flagged for a source gap.

Contradicted

A source directly refutes the claim. Blocked at the boundary — it never ships.

The product

A full compliance workspace, not a logging widget

Everything a regulated AI team needs to run the verification loop end to end — and hand a clean binder to an auditor when they knock.

Trace replay

Step through any call — inbound, redaction, model, extraction, verdicts, seal — exactly as it happened.

Compliance posture

Pre-built regulator views with verdict drift over time and drill-down by app or framework.

Audit room

Run a live engagement with external auditors — requests, evidence, sign-off, all on the chain.

Judges & model registry

Pin builds, track calibration, run shadow candidates against live traffic before you promote.

Verification playground

Paste a prompt and draft answer and watch the whole chain respond — nothing billed, nothing sealed.

Incident postmortems

Chain-anchored write-ups with blast radius, timeline, root cause, and tracked remediations.

Security & provenance

Trust through proof, not promises

You don't have to trust Attestia — that's the point. Every guarantee we make is one an auditor can check for themselves, offline, without our help.

Ed25519 signatures

Every trace and reviewer decision is signed. The public key is yours to share; verification needs nothing from us.

SHA256:af3c…91b9c4d27f201e8b9

Daily public bulletin

Each day's traces are Merkle-anchored to a public bulletin. Retroactive edits are cryptographically impossible to hide.

Block #1,247 · 5,117 leaves · root af3c…91

PII never reaches the model

HIPAA identifiers are redacted with deterministic surrogates before any call leaves your boundary — and the mapping is one-way.

MRN → [PT-{hash6}] · irreversible
Private beta · on the record

Put your AI on the record.

We're onboarding regulated teams in cohorts. Join the waitlist to start your evidence chain before your next audit — not during it.

Or with a few details · sign in if you already have an account.